[Report] The State of Incident Response 2017

Demisto recently sponsored an independent, third-party survey conducted with security professionals around the world working for companies ranging from less than 500 employees to greater than 20,000 employees. The goal of the survey was to discover challenges faced by incident response (IR) teams and how they are addressing them (or not).

Trends that we found were quite surprising (and alarming). Some examples include:

#1 IR challenge reported was number of IS tools, surpassing lack of time and number of alerts.

Almost half of those surveyed reported that they are in constant firefighting mode.